View Issue Details

This issue affects 1 person(s).
 4
IDProjectCategoryView StatusLast Update
20526Bug reports_ Unknownpublic2026-08-11 16:01
Reporterriadh2020 Assigned Toc_schmitz  
PrioritynoneSeverityminor 
Status closedResolutionfixed 
Product Version6.14.x 
Summary20526: CSS Injection Bug in fruity_twentythree theme - Broken checkbox/radio checkmark unicode (content: "\";)
Description

When rendering a survey using the default fruity_twentythree core theme (or a child theme inheriting from it), an unescaped backslash bug occurs in the dynamically injected <style> block inside the <head>.

.checkbox-item input[type="checkbox"]:checked + label::after,
.checkbox-item input[type="radio"]:checked + label::after {
content: "\";
}
his unescaped single backslash treats the closing quote and semicolon as part of the string or breaks the CSS parser, preventing the checkmark icon from displaying correctly on checked boxes and radios. It seems like a core twig or database configuration variable for the icon unicode (e.g., \f00c) is being truncated or incorrectly escaped upon rendering.

Steps To Reproduce

Steps to reproduce

Create a survey using the standard fruity_twentythree theme.

View the source code of the active survey page.

Inspect the <style> block in the HTML <head>.

Notice the broken content: "\"; rule for .checkbox-item.

Expected result

The content property should either contain a valid font icon unicode string (like "\f00c") or be properly handled if empty, instead of exposing a raw broken backslash "\";.

Actual result

(Write here what happened instead)

TagsNo tags attached.
Bug heat4
Complete LimeSurvey version number (& build)LimeSurvey Community Edition Version 6.14.0+250520
I will donate to the project if issue is resolvedNo
Story point estimate
BrowserFirfox
Database type & versionMySQL / MariaDB (via mysqlnd 8.1.33 / PDO)
Server OS (if known)Linux (Cluster d'hébergement OVH)
Webserver software & version (if known)
PHP Version8.1.33 (FPM/FastCGI)

Users monitoring this issue

There are no users monitoring this issue.

Activities

c_schmitz

c_schmitz

2026-08-07 16:08

administrator   ~85403

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=40126

LimeBot

LimeBot

2026-08-11 16:01

administrator   ~85434

Fixed in Release 7.0.9+260812

LimeBot

LimeBot

2026-08-11 16:01

administrator   ~85443

Fixed in Release 7.0.9+260812

Related Changesets

LimeSurvey: master 96e63a4c

2026-08-07 16:08

c_schmitz


Details Diff
Fixed issue 20526: Broken CSS in fruity_twentythree theme Affected Issues
20526
mod - themes/survey/fruity_twentythree/views/subviews/header/custom_header.twig Diff File

Issue History

Date Modified Username Field Change
2026-05-21 07:32 riadh2020 New Issue
2026-08-07 16:08 c_schmitz Changeset attached => LimeSurvey master 96e63a4c
2026-08-07 16:08 c_schmitz Note Added: 85403
2026-08-07 16:08 c_schmitz Assigned To => c_schmitz
2026-08-07 16:08 c_schmitz Status new => resolved
2026-08-07 16:08 c_schmitz Resolution open => fixed
2026-08-07 16:08 c_schmitz Bug heat 0 => 2
2026-08-11 16:01 LimeBot Note Added: 85434
2026-08-11 16:01 LimeBot Status resolved => closed
2026-08-11 16:01 LimeBot Bug heat 2 => 4
2026-08-11 16:01 LimeBot Note Added: 85443